2006-07-16,11:50:07
System Repair Engineer 2.0.21.505 (2.0 RC 2)
Smallfrogs (http://www.KZTechs.com)
Windows XP Professional Service Pack 2 (Build 2600)
- Administrative User - Completed Functions Allowed
Follow item(s) have been choosed:
All Boot Items (Including Registry, Startup Folders, Services and so on)
Browser Add-ons
Runing Processes (Including process model information)
File Associations
Boot Items
Registry
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
<ctfmon.exe><C:\WINDOWS\system32\ctfmon.exe> [Microsoft Corporation]
<ares><; "C:\Program Files\Ares\Ares.exe" -h> []
<caishowmanage><; C:\Program Files\CaiShow Tech\CaiShow\UpdateManager.EXE> []
<CashFiesta><; C:\Documents and Settings\jong\My Documents\Cashfiesta.exe> []
<NBJ><; "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"> [Ahead Software AG]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<load><> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
<BootSkin Startup Jobs><; "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs> []
<KAVPersonal50><; "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize> [Kaspersky Lab]
<QuickTime Task><; "C:\Program Files\QuickTime\qttask.exe" -atboottime> [Apple Computer, Inc.]
<TkBellExe><; "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot> [RealNetworks, Inc.]
<MIC><; C:\Program Files\system32\CFTMON.EXE> []
<WINEXP><; C:\Program Files\microsoft office\SYSEXP.EXE> []
<SYSLOGO><; C:\Program Files\microsoft office\WINLOGO.EXE> []
<123><; C:\Program Files\CNNIC\Cdn\cdnup.exe> []
<IESAddr><; C:\Program Files\CNNIC\Cdn\cdnup.exe> []
<IMJPMIG8.1><; C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE /Spoil /RemAdvDef /Migration32> [Microsoft Corporation]
<ISUSPM Startup><; "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup> []
<ISUSScheduler><; "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start> [Macrovision Corporation]
<NeroFilterCheck><; C:\WINDOWS\system32\NeroCheck.exe> [Ahead Software Gmbh]
<SunJavaUpdateSched><; C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe> [Sun Microsystems, Inc.]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<shell><Explorer.exe> [Microsoft Corporation]
<Userinit><C:\WINDOWS\system32\userinit.exe,> [Microsoft Corporation]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<AppInit_DLLs><APIHookDll.dll> []
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
<UIHost><logonui.exe> [Microsoft Corporation]
==================================
Startup Folders
Services
[kavsvc / kavsvc]
<"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe"><Kaspersky Lab>
[StarWind iSCSI Service / StarWindService]
<C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe><Rocket Division Software>
[UsbScaner Service / UsbScaner]
<d:\Program Files\uusee\mp4\usbscaner.exe><Hoola Digital Media Co.,Ltd>
==================================
Browser Add-ons
[CaiShowBH Class]
{3AF40CB8-B3BA-4E2D-8968-4BF8DB172997} <, N/A>
[DragSearch BHO]
{62EED7C6-9F02-42f9-B634-98E2899E147B} <, N/A>
[T2BHO Class]
{B1D147E7-873E-4909-8127-695D9BB78728} <, N/A>
[Java Plug-in 1.5.0_02]
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} <C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll, Sun Microsystems, Inc.>
[QQ]
{c95fe080-8f5d-11d2-a20b-00aa003c157b} <D:\Program Files\Tencent\QQ\QQ.EXE, TENCENT>
[FlashGet]
{D6E814A0-E0C5-11d4-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\flashget.exe, Amaze Soft>
[QQIEFloatBarCfgCmd Class]
{DEDEB80D-FA35-45d9-9460-4983E5A8AFE6} <D:\Program Files\Tencent\QQ\QQIEHelper.dll, N/A>
[情景聊天]
{E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} <http://cn.rd.yahoo.com/home/messenger/bjk/clientbtn/?http://cn.messenger.yahoo.com/, N/A>
[易趣购物]
{EE60714F-AC17-427e-861A-FD60CBDF119A} <http://click2.ad4all.net/url2/urlmanage/url.asp?id=86, N/A>
[Messenger]
{FB5F1910-F110-11d2-BB9E-00C04F795683} <C:\Program Files\Messenger\msmsgs.exe, Microsoft Corporation>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[踢刓辦祒(&K)]
{6C3797D2-3FEF-4cd4-B654-D3AE55B4128C} <d:\PROGRA~1\Kingsoft\FastAIT\IEBand.dll, N/A>
[Poco Toolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3B} <C:\PROGRA~1\IS\plugins\ToolBand.dll, 1??Yêyáaèí?t??ê?óD?T1???>
[QuickTime
Object]
{02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} <C:\Program Files\QuickTime\QTPlugin.ocx, Apple Computer, Inc.>
[Windows Genuine Advantage Validation Tool]
{17492023-C23A-453E-A040-C7C580BBF700} <C:\WINDOWS\system32\LegitCheckControl.DLL, Microsoft Corporation>
[Minesweeper Flags Class]
{2917297F-F02B-4B9D-81DF-494B6333150B} <C:\WINDOWS\Downloaded Program Files\minesweeper.dll, Microsoft Corporation>
[MSN Photo Upload Tool]
{4F1E5B1A-2A80-42CA-8532-2D05CB959537} <C:\WINDOWS\Downloaded Program Files\MsnPUpld.dll, Microsoft? Corporation>
[MUWebControl Class]
{6E32070A-766D-4EE6-879C-DC1FA91D2FC3} <C:\WINDOWS\system32\muweb.dll, Microsoft Corporation>
[Java Plug-in 1.5.0_02]
{8AD9C840-044E-11D1-B3E9-00805F499D93} <C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll, Sun Microsystems, Inc.>
[MessengerStatsClient Class]
{8E0D4DE5-3180-4024-A327-4DFAD1796A8D} <C:\WINDOWS\Downloaded Program Files\messengerstatsclient.dll, Microsoft Corporation>
[MsnMessengerSetupDownloadControl Class]
{B38870E4-7ECB-40DA-8C6A-595F0A5519FF} <C:\WINDOWS\Downloaded Program Files\MsnMessengerSetupDownloader.ocx, Microsoft Corporation>
[Java Plug-in 1.4.2_11]
{CAFEEFAC-0014-0002-0011-ABCDEFFEDCBA} <C:\Program Files\Java\j2re1.4.2_11\bin\npjpi142_11.dll, JavaSoft / Sun Microsystems, Inc.>
[Java Plug-in 1.5.0_02]
{CAFEEFAC-0015-0000-0002-ABCDEFFEDCBA} <C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll, Sun Microsystems, Inc.>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[Solitaire Showdown Class]
{F6BF0D00-0B2A-4A75-BF7B-F385591623AF} <C:\WINDOWS\Downloaded Program Files\solitaireshowdown.dll, Microsoft Corporation>
[Poco Toolbar]
{0E1230F8-EA50-42A9-983C-D22ABC2EED3B} <C:\PROGRA~1\IS\plugins\ToolBand.dll, 1??Yêyáaèí?t??ê?óD?T1???>
[CaiShowBH Class]
{3AF40CB8-B3BA-4E2D-8968-4BF8DB172997} <, N/A>
[DragSearch BHO]
{62EED7C6-9F02-42F9-B634-98E2899E147B} <, N/A>
[T2BHO Class]
{B1D147E7-873E-4909-8127-695D9BB78728} <, N/A>
[Shockwave Flash
Object]
{D27CDB6E-AE6D-11CF-96B8-444553540000} <C:\WINDOWS\system32\Macromed\Flash\Flash8b.ocx, Macromedia, Inc.>
[FlashGet Bar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3} <C:\PROGRA~1\FLASHGET\fgiebar.dll, Amaze Soft>
[&Search]
<http://bar.mywebsearch.com/menusearch.html?p=ZBzeb032YYMY, N/A>
[Add to QQ Customized Panel]
<D:\Program Files\Tencent\QQ1\AddPanel.htm, N/A>
[Add to QQ Emoticons]
<D:\Program Files\Tencent\QQ1\AddEmotion.htm, N/A>
[Send picture by MMS]
<D:\Program Files\Tencent\QQ1\SendMMS.htm, N/A>
[Send the Picture by QQ MMS]
<D:\Program Files\Tencent\QQ1\SendMMS.htm, N/A>
[ㄏノ FlashGet 更]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[上?到QQ网?硬?]
<D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[上传到QQ网络硬盘]
<D:\Program Files\Tencent\QQ\AddToNetDisk.htm, N/A>
[使用 FlashGet 下載]
<C:\Program Files\FlashGet\jc_link.htm, N/A>
[全部使用 FlashGet 下載]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
[匯出至 Microsoft Excel(&X)]
<res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000, N/A>
[妏蚚IS狟婥]
<C:\Program Files\IS\IS.htm, N/A>
[氝樓善QQ桶?]
<, N/A>
[氝樓善QQ赻隅砱醱啣]
<D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ自定?面板]
<D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ自定义面板]
<D:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ自定義面板]
<d:\Program Files\Tencent\QQ\AddPanel.htm, N/A>
[添加到QQ表情]
<D:\Program Files\Tencent\QQ\AddEmotion.htm, N/A>
[用QQ彩信?送??片]
<D:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[用QQ彩信发送该图片]
<D:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[用QQ彩信發送該圖片]
<d:\Program Files\Tencent\QQ\SendMMS.htm, N/A>
[用炫彩图铃发送该图片]
<C:\Program Files\CaiShow Tech\CaiShow\SendMMS.htm, N/A>
[蚚QQ粗陓楷冞蜆芞?]
<, N/A>
[场ㄏノ FlashGet 更]
<C:\Program Files\FlashGet\jc_all.htm, N/A>
==================================
Running Processes
[PID: 968][\SystemRoot\System32\smss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1148][\??\C:\WINDOWS\system32\csrss.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[PID: 1172][\??\C:\WINDOWS\system32\winlogon.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>
[C:\WINDOWS\system32\WgaLogon.dll] <Microsoft Corp.><1.5.0512.0>
[PID: 1216][C:\WINDOWS\system32\services.exe] <Microsoft Corporation><5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)>